This vulnerability involves a path traversal flaw in the web interface component of Intelbras iNVU 7016 FT firmware version 3.004.00IB000.0.T Build 2025-09-26. An attacker with high privileges can remotely manipulate the affected function to traverse directories, potentially accessing unauthorized files. The vendor responded quickly and released a fixed version of the product. Exploit code has been published but there are no known exploits in the wild at this time. The CVSS 4.0 base score is 5.1, reflecting medium severity with network attack vector, low complexity, no user interaction, and limited confidentiality impact.

Successful exploitation allows an attacker with high privileges to perform path traversal attacks remotely, potentially accessing or manipulating files outside the intended directory scope. The confidentiality impact is low, and there is no integrity or availability impact reported. The vulnerability could lead to unauthorized information disclosure or system misconfiguration if exploited.

A fixed version of the Intelbras iNVU 7016 FT has been released by the vendor following responsible disclosure. It is recommended to upgrade to the fixed version as soon as possible to remediate this vulnerability. Since the vendor advisory confirms a fix is available, applying the official update is the primary mitigation. No additional mitigations are specified.